# PhishDestroy domain threat record: dinexionsoftware.click Content language: English Canonical HTML report: https://phishdestroy.io/domain/dinexionsoftware.click/ Machine-readable companion: https://phishdestroy.io/domain/dinexionsoftware.click/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-25 08:37:13 UTC - Last availability or vendor check: 2026-10-27 23:02:19 UTC - Stored record updated: 2026-10-27 23:22:11 UTC - VirusTotal detections in the stored snapshot: 1/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 185.62.56.63 - Registrar in stored WHOIS data: NETIM - Registrar country in stored WHOIS data: GB - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-03-30 07:02:17 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a17233-12c9-7233-9a04-f30369178056/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/dinexionsoftware.click - Certificate Transparency search: https://crt.sh/?q=%25.dinexionsoftware.click - Web Archive lookup: https://web.archive.org/web/*/https://dinexionsoftware.click/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy’s automated assessment classified dinexionsoftware.click as a fake crypto exchange. The intake on 2026-10-25 observed that the site advertises itself as an “AI Trading Platform” and solicits name, email and phone to “Open your Dinexion account”, a pattern typical of fraudulent investment schemes. The domain was first seen by PhishDestroy on 2026-10-25 and returned HTTP 200 on that date. How the scam works Fake crypto exchanges masquerade as legitimate trading services, often using buzzwords like AI or bots to lure victims. They typically collect personal information and may later request cryptocurrency deposits, promising high returns while retaining any funds sent. Evidence VirusTotal recorded one malicious detection out of 92 engines on 2026-10-24, with SOCRadar labeling the domain as phishing. Google Safe Browsing did not flag the site on 2026-10-25. urlscan.io’s machine‑learning engine gave a score of 98 and tagged the page as malicious, while its overall verdict was non‑malicious. Cloudflare Radar on 2026-10-25 marked the domain malicious for malware and phishing. PhishDestroy’s internal blocklist contains the domain; external blocklists returned zero hits, though Cloudflare’s Family list blocked it once. OTX listed five pulses mentioning the domain as of 2026-10-25. Infrastructure The domain was registered on 2026-03-30 through NETIM SARL and was 208 days old at the time of capture. It resolved to IP 185.62.56.63 (ASN 62370, Snel.com B.V.) and used Cloudflare’s DNS nameservers leonard.ns.cloudflare.com and joyce.ns.cloudflare.com. The site presented a TLS 1.3 certificate from ZeroSSL valid until 2027-01-21. What to do Anyone who entered personal data should treat the site as a phishing attempt, change any reused passwords and monitor accounts for suspicious activity. If cryptocurrency wallet information was shared, create a new wallet, move funds and revoke any approvals. Defenders should block dinexionsoftware.click at the network perimeter, log DNS queries for 185.62.56.63 and apply the same indicators to security tools. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a17233-12c9-7233-9a04-f30369178056/ Cloudflare Radar report: https://radar.cloudflare.com/scan/889b854a-7077-4148-8b28-87cccbede0c3 URLQuery report: https://urlquery.net/report/d80f9bc1-748b-4832-8e80-ffd784e2b311 Stored capture screenshot: https://urlscan.io/screenshots/01a17233-12c9-7233-9a04-f30369178056.png Cloudflare Radar screenshot (2026-10-25T09:15:03Z): https://screenshots.phishdestroy.io/cf/889b854a-7077-4148-8b28-87cccbede0c3.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/d80f9bc1-748b-4832-8e80-ffd784e2b311.png URLScan screenshot (2026-10-25T08:49:02Z): https://screenshots.phishdestroy.io/us/01a1723f-9468-75d0-b9fd-6fc02ca3fb24.png URLScan capture report: https://urlscan.io/result/01a1723f-9468-75d0-b9fd-6fc02ca3fb24/ VirusTotal report: https://www.virustotal.com/gui/domain/dinexionsoftware.click Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=dinexionsoftware.click Archived copy: https://web.archive.org/web/20261025083838/https://dinexionsoftware.click/ Revoke token approvals: https://revoke.cash/ Report crypto fraud (Chainabuse): https://www.chainabuse.com/report Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-25 11:23:21 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a17233-12c9-7233-9a04-f30369178056.png Captured: 2026-10-25 08:37:13 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a17233-12c9-7233-9a04-f30369178056.png Captured: 2026-10-25 08:37:13 UTC Source report: https://urlscan.io/result/01a17233-12c9-7233-9a04-f30369178056/ - URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a1723f-9468-75d0-b9fd-6fc02ca3fb24.png Captured: 2026-10-25 08:49:02 UTC Source report: https://urlscan.io/result/01a1723f-9468-75d0-b9fd-6fc02ca3fb24/ SHA-256: db510f6fef6eb7f3cac009dcadbbd3883fc2a76ec607034ef769946cc02e6a92 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/889b854a-7077-4148-8b28-87cccbede0c3.png Captured: 2026-10-25 09:15:03 UTC Source report: https://radar.cloudflare.com/scan/889b854a-7077-4148-8b28-87cccbede0c3 SHA-256: b9c6d60530523974f0457030ba56973c13a312e3f796e95335971455af7ff777 - URLQuery: https://screenshots.phishdestroy.io/uq/d80f9bc1-748b-4832-8e80-ffd784e2b311.png Source report: https://urlquery.net/report/d80f9bc1-748b-4832-8e80-ffd784e2b311 SHA-256: 35414bf94554c12a95e72b1c3b991f6753b2c88fc0f5186dccd3e5566acaa227 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-25T09:16:35Z", "uuid": "01a17233-12c9-7233-9a04-f30369178056", "scanned_at": "2026-10-25T08:35:23Z", "final_url": "https://dinexionsoftware.click/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://dinexionsoftware.click/", "from": "http://dinexionsoftware.click/", "status": 307 } ], "ip": "185.62.56.63", "ptr": "s46060.hosted-by-snel.com", "domains": [ "cdn.jsdelivr.net", "challenges.cloudflare.com", "cdnjs.cloudflare.com", "fonts.gstatic.com", "www.cloudflare.com", "fonts.googleapis.com" ], "ips": [ "142.251.14.94", "104.18.94.41", "104.16.123.96", "104.17.208.5", "104.17.24.14", "192.178.183.95", "185.62.56.63" ], "asns": [ "15169", "13335", "62370" ], "countries": [ "US", "NL" ], "doc_hash": "76cf3a805dbaaba909aa68135fb13e9c94f5dec6c942d5361f4836c6a784a225", "script_hashes": [ "3c42b6e29c968b3a7058f9def7f86cf761b03a254633cdc488a8003d6e449571" ], "globals": [ "toggleTermsPopup", "intlTelInput", "__TS_SITEKEY", "__tsGet", "__tsReset", "__tsNeedsClick", "__tsShow", "__lgBS", "__visitorCountry", "ClientJS", "turnstile" ], "storage_keys": [ "t_cfp" ], "tls": { "san": [ "dinexionsoftware.click" ], "cipher": "AES_128_GCM", "issuer": "ZeroSSL ECC DV SSL CA 2", "subject": "dinexionsoftware.click", "protocol": "TLS 1.3", "valid_to": "2027-01-21T23:59:59Z", "valid_from": "2026-10-23T00:00:00Z" }, "domain_age_days": 208, "apex_age_days": 208, "tls_age_days": 2, "tls_valid_days": 90, "requests": 26, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } }, "cf": { "v": 1, "fetched_at": "2026-10-25T09:18:29Z", "uuid": "889b854a-7077-4148-8b28-87cccbede0c3", "scanned_at": "2026-10-25T09:15:03Z", "final_url": "https://dinexionsoftware.click/", "status": 200, "history": [ { "url": "https://dinexionsoftware.click/", "status": 200 } ], "dom_hash": "82aa7436f6b0c56a9fa5dc7949071c0bac2b6065eb3d931e32015955b7a0955a", "doc_hash": "76cf3a805dbaaba909aa68135fb13e9c94f5dec6c942d5361f4836c6a784a225", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "dinexionsoftware.click", "type": "A", "value": "185.62.56.63" } ], "dnssec_valid": false, "ip": "185.62.56.63", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "NETIM SARL", "created": "2026-03-30T09:02:16Z", "updated": "2026-04-04T09:02:50Z", "expires": "2027-03-30T09:02:16Z", "nameservers": [ "leonard.ns.cloudflare.com", "joyce.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-25T11:20:55Z", "analysis_at": "2026-10-24T05:21:10Z", "stats": { "timeout": 0, "harmless": 56, "malicious": 1, "suspicious": 0, "undetected": 35 }, "detections": { "SOCRadar": "phishing" }, "reputation": 0, "created": "2026-03-30T00:00:00Z", "updated": "2026-03-30T00:00:00Z", "first_seen": "2026-03-30T10:15:28Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "leonard.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "185.62.56.63" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "joyce.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "joyce.ns.cloudflare.com" } ], "dns_at": "2026-10-24T05:32:02Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "dinexionsoftware.click" ], "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "serial": "f99ab77320078704cce771a7ab1696cf", "sha256": "b4afa70e2331bba25c82ddd47d5414e1cf4d08307a4158ced49cb1bde1a783c1", "subject": "dinexionsoftware.click", "valid_to": "2027-01-21T23:59:59Z", "valid_from": "2026-10-23T00:00:00Z" }, "whois": [], "rdap": { "status": [ "active", "client transfer prohibited" ], "events": { "expiration": "2027-03-30T21:00:00Z", "last changed": "2026-03-30T11:02:14Z", "registration": "2026-03-30T00:00:00Z", "registrar expiration": "2027-03-30T21:00:00Z", "last update of RDAP database": "2026-10-18T17:48:44Z" }, "registrar": "NETIM SAS", "registrar_iana_id": "1519" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-25T09:18:46Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "dinexionsoftware.click" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-25T08:38:38Z", "first": "2026-10-25T08:38:38Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 13290 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://dinexionsoftware.click/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 140 }, "social_tags": { "ogUrl": "https://dinexionsoftware.click/", "title": "Dinexion | AI Trading Platform | Official Website", "ogType": "website", "robots": "index, follow", "ogTitle": "Dinexion | Premier AI-Driven Trading Automation", "ogSiteName": "Dinexion", "themeColor": "#1a0028", "description": "Dinexion delivers AI-driven trading automation with structured execution workflows, real-time monitoring, and risk controls for confident participation.", "twitterCard": "summary", "canonicalUrl": "https://dinexionsoftware.click/", "ogDescription": "Dinexion delivers intelligent trading bots and AI-assisted workflows with structured configuration, monitoring views, and risk controls for confident participation." }, "trackers": { "requests": 20, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 7 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 3 } ] }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 2, "tls": 31, "wait": 17, "connect": 13, "download": 23 }, "response_ms": 86 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "ocsp_stapled": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 48244, "co2_grams": 0.0018, "cleaner_than": 38 }, "dns_server": { "ns": [ { "ip": "172.64.35.54", "host": "leonard.ns.cloudflare.com" }, { "ip": "108.162.194.14", "host": "joyce.ns.cloudflare.com" } ], "zone": "dinexionsoftware.click" }, "location": { "ip": "185.62.56.63", "asn": "62370", "org": "Snel.com B.V.", "city": "Schiedam", "country": "NL" }, "ssl": { "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "subject": "dinexionsoftware.click" }, "dns": { "A": [ "185.62.56.63" ], "NS": [ "leonard.ns.cloudflare.com", "joyce.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"joyce.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417643160, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "185.62.56.63", "family": 4 }, "redirects": { "chain": [ "https://dinexionsoftware.click" ] }, "linked_pages": { "internal_count": 11 }, "whois": { "registrar": "NETIM SARL", "created": "2026-03-30T09:02:16Z", "updated": "2026-04-04T09:02:50Z", "expires": "2027-03-30T09:02:16Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "leonard.ns.cloudflare.com", "joyce.ns.cloudflare.com" ] }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } } } } ```